Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
File: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft (raw, json)
Hash identifier: tv8aZkdfHTc2lQJ3yg7B1FRRk5LZRMOcJ8HotITbBgI=
Subject key identifier: BF:08:09:D3:1E:BC:85:82:C5:B7:B5:E1:BF:49:EF:ED:A1:69:6D:0E
Authority key identifier: FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
Certificate issuer: /CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Certificate serial: 0194BC04DC39AC785303449B7C8CCA679ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
Manifest number: 10AB
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: _Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl (hash: QGNfHadM+cY47nTFq6NVqcZCdyIhl/hZWn2qZR0slY4=)
2: f60EmIZKa-1VrYL_MeAVCpnK1Bw.roa (hash: V7fZBYf3+IM758mKxyijYRokDtoZy64QV7izw1/QisI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dc:39:ac:78:53:03:44:9b:7c:8c:ca:67:9e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8ec3435380e8ae15fc81cddcc94cee67d6b390
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=bf0809d31ebc8582c5b7b5e1bf49efeda1696d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:5b:64:6a:81:07:74:7f:d5:75:b9:1c:f8:
00:60:03:f0:36:98:c5:8d:fb:23:4d:ca:fb:89:5d:
c1:b2:86:fa:1c:b0:b3:6b:26:a0:9a:d0:14:b4:79:
51:f4:a7:d5:20:90:aa:27:cd:c6:25:bb:4a:12:a0:
86:88:8d:fd:2d:60:04:b4:23:73:9b:5c:7b:23:57:
44:4b:1d:02:56:c6:44:34:a8:ca:f1:0f:0c:7b:7f:
31:4e:a1:8f:f7:78:96:2b:bd:02:c3:1e:f7:a2:e8:
b9:af:13:87:ed:0e:3b:67:4f:da:7c:66:d9:cc:c4:
2d:d1:2f:0d:7d:ee:74:06:f5:f9:b7:cb:b4:15:36:
e9:f4:aa:d8:18:bb:67:dd:ea:57:8a:1d:9b:fc:43:
9b:b3:18:2a:f7:92:8f:06:d7:ce:42:de:c5:dc:d7:
a0:74:35:5d:22:d2:40:e9:15:90:2a:d2:45:b3:b0:
71:8b:67:59:7e:76:de:65:22:fa:b2:2f:79:a5:f9:
08:98:4c:34:1a:28:fb:55:ba:53:9e:ba:e1:40:8c:
d8:9f:e0:d1:d8:27:29:01:e1:17:88:06:f0:49:46:
57:df:1a:e0:68:4e:93:65:13:5e:87:bf:6d:1b:e0:
2d:17:bb:25:49:70:72:1a:c8:49:5e:2d:81:33:75:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:08:09:D3:1E:BC:85:82:C5:B7:B5:E1:BF:49:EF:ED:A1:69:6D:0E
X509v3 Authority Key Identifier:
keyid:FD:8E:C3:43:53:80:E8:AE:15:FC:81:CD:DC:C9:4C:EE:67:D6:B3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/70e69c-dc4e-4c96-89df-f762526307e8/1/_Y7DQ1OA6K4V_IHN3MlM7mfWs5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:61:60:21:ce:ee:1e:c1:16:e7:4e:72:56:ef:05:b9:26:b0:
69:99:28:8a:ae:37:bd:f7:15:6c:64:1c:ca:1a:fc:63:4f:8a:
f1:83:fb:f7:51:a9:75:7a:57:71:1f:a7:2d:61:2a:e6:d3:5e:
48:37:81:8d:12:38:d2:4c:aa:b9:30:82:9c:ca:af:3b:1b:48:
ee:fd:bb:20:83:4a:14:a1:2f:0f:35:f8:9e:5b:ac:a4:8d:75:
b7:34:41:18:ef:71:0e:55:fd:75:df:6e:dc:51:8e:fc:46:f0:
89:0f:f3:e0:b3:4e:35:8e:df:0a:21:7f:cb:26:e8:ae:41:74:
14:05:76:ab:9e:3e:28:48:ef:16:ce:79:59:24:bc:6c:d1:b1:
08:96:17:19:c5:ee:2a:56:36:d1:66:09:40:57:f4:88:9e:f6:
59:78:91:d5:4b:8b:6f:2f:ae:03:ac:f8:04:69:92:1c:d2:ef:
91:4a:c9:43:d6:1e:12:6a:99:41:98:da:a4:8b:07:f3:71:e2:
4f:19:61:51:41:ec:31:63:42:b4:35:2f:24:65:2d:82:62:5d:
62:60:83:80:56:ff:a0:ea:19:a4:10:6f:01:91:78:8a:9e:42:
75:3f:4b:b4:60:75:d6:0e:5e:3d:9d:5e:83:a9:a8:0b:e4:65:
a9:46:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:17 2025 by rpki-client